AEPD (Spain) · Date not published
FOURTH PARTY LOGISTICS, S.L.
About: Processor obligations
Fine€96,000Other Outcome
- Regulator
- AEPD (Spain)
- Decided
- Date not published
- Country
- Spain
- Sector
- Not given
- Regulator’s reference
- EXP202208230
- Fino case number
- ND/ES/085
What happened
The Spanish DPA sanctioned a processor for violating GDPR Articles 28(2) and 28(3). This was despite the fact that no written contract existed between the processor and the subprocessors and the controller had not been told of the subprocessors' involvement in data processing activities.
Summary from GDPRhub (noyb), written by its volunteers, not by Fino. CC BY-NC-SA 4.0.
Rules involved
- Processor obligations
Sources
The facts on this page come from the sources above, as they recorded them. Nothing has been estimated or filled in. Not legal advice.
Spotted a mistake? Write to angelillolorenzo@gmail.com and quote ND/ES/085.